On Thu, 26 Mar 2020 at 11:47, Arnau Bria wrote:
Dear all,

we're preparing our sssd service to be fully compliant with the patch the Microsfot will release soon and that will make AD reject any communication that is not encrypted. ( ADV190023 ). 

You want to read this thread:

https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org/thread/X4UNOPT4ITVZZBNWSNLCGJELPXACVC3M/

ldaps is *not* required for encrypted comms.

Cheers,

John

--
John Beranek                         To generalise is to be an idiot.
http://redux.org.uk/                                 -- William Blake